4c68aeb0cf8cd112db6ae36432dd2748_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c68aeb0cf8cd112db6ae36432dd2748_JaffaCakes118
Size

304KB
MD5

4c68aeb0cf8cd112db6ae36432dd2748
SHA1

a46066f7d956188738c0e3a22010b2eea5e59c6f
SHA256

8f66f6d28fc881d5ddaac5380d6b22e071c325f5ab53836d7c6d76eb84a789ae
SHA512

4d458bafccfc83cc5a4c652fce671697a808dbf078b09d3cf901aa5e4596fd5c773a3c6571cb990779359e75022fc3d26809701d3b9987c4735a42f35bd97cd0
SSDEEP

6144:5xkz7T19aAj4IrnbfXbRtv7VzlrYRI5yZ8bAR7eJUj6sDuN9D9AjGPoZSbc89gBi:nOuI/5lrYR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c68aeb0cf8cd112db6ae36432dd2748_JaffaCakes118

Files

4c68aeb0cf8cd112db6ae36432dd2748_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7bb4720ceb82f0cfe4dc01af9e82ef3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord593
ord300
ord594
ord301
ord595
ord596
ord303
ord598
ord306
ord520
ord307
ord522
ord309
ord524
ord632
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord564
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord645
ord647
ord648
ord571
ord573
ord681
ord100
ord689
ord612
ord616
ord617
ord619
ord581

Sections

.text
Size: 296KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ